Solved

IIS home page Intranet asking for credentials

Posted on 2014-10-23
8
177 Views
Last Modified: 2014-11-10
I have a window 2008 IIS server.  We have our intranet on this - for what ever reason my home page is asking users to log in?  I don't want this but I'm not sure what is causing this.  I have the suthentication set to anonymous, asp.net and basic authentication.  For the Anonymous user identity is has the group oldservername\IUSR_Oldservername.  The new server as a different name is this my issue or Is there something I'm missing?
0
Comment
Question by:WellingtonIS
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 28

Expert Comment

by:Pravin Asar
ID: 40400990
For some reason, you have IWA enabled for the site directory

http://support.microsoft.com/kb/837139

Is your new server on different domain name ? server name does not matter
0
 
LVL 29

Expert Comment

by:becraig
ID: 40401001
okie so it seems like you migrated from one server to another, since you are using an account for anonymous that is not valid on the new server.

There should be a local account created on the new server similar to:
IUSR
More details on how this works in later versions of IIS
http://www.iis.net/learn/get-started/planning-for-security/understanding-built-in-user-and-group-accounts-in-iis

You can just identify the anonymous identity built into your version of windows and change the anonymous account to match this, using the instructions below:
http://technet.microsoft.com/en-us/library/cc770966%28v=ws.10%29.aspx
0
 
LVL 28

Expert Comment

by:Pravin Asar
ID: 40401005
New installation of IIS, should create appropriate user for Anonymous  access.

I think you copied the directory structure from old machine to new as admin and this newly copied directory structure may have appropriate access.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 29

Expert Comment

by:becraig
ID: 40401006
If you read the post you will see the author states:

For the Anonymous user identity is has the group oldservername\IUSR_Oldservername.


Which is clearly not accurate since that naming convention has been replaced with later versions of ISS>
0
 
LVL 79

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 40401155
remove the basic authentication and asp authentication unless you want users to login
0
 

Author Comment

by:WellingtonIS
ID: 40401902
You are correct I migrated the box - I guess I need to create a service account with full control to the site then add this to the IIS_IUSRS group?  Or would it be best to use Application pool identity?
0
 

Author Comment

by:WellingtonIS
ID: 40433245
I tried Application Pool idenity and so far that's working - it's hasn't asked for credientals since.
0
 

Author Closing Comment

by:WellingtonIS
ID: 40433249
I wound up using application pool and it's working - thanks for the help
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question